Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa
File: 07653354-62e0-4912-98f0-2c22354ec38a.roa (raw, json)
Hash identifier: z3ak3kYYtq7kV8U41qDqGgD/zw3AlqFsbqtLChqu+xo=
Subject key identifier: A8:92:70:7F:82:05:A2:62:A7:61:A1:07:95:4A:92:B7:47:F2:04:0A
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 596B0B61F84F0F07D4EB5317F4874664799C7953
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa
Signing time: Tue 04 Mar 2025 18:10:43 +0000
ROA not before: Tue 04 Mar 2025 18:10:43 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.127.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6b:0b:61:f8:4f:0f:07:d4:eb:53:17:f4:87:46:64:79:9c:79:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Mar 4 18:10:43 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:76:63:fe:9f:fd:50:07:f4:99:30:59:a3:
16:aa:77:ac:08:c7:34:16:81:78:0a:03:6e:2c:09:
7c:d3:6c:f2:04:34:14:ba:73:3e:17:ee:86:95:32:
32:91:5e:10:d9:6c:72:6a:b5:3e:3c:a6:4f:8b:f6:
30:03:cd:46:65:6a:e1:42:59:7a:82:ea:df:28:21:
d2:1e:29:7e:2f:72:84:8b:27:ea:d6:d7:60:ba:03:
9d:4d:b5:6a:76:b9:ab:84:bb:b6:38:05:43:af:e6:
55:32:7b:6b:a1:f4:1a:9f:da:c6:33:86:e6:7d:e4:
59:08:14:13:05:04:4a:35:45:c2:48:82:79:b8:c6:
b2:c9:05:e7:d1:14:83:07:0a:e0:79:04:6e:a5:1c:
78:f1:5e:b0:14:3d:d5:91:d4:3b:9f:3c:49:49:e1:
5d:54:d3:36:3b:41:03:b0:04:20:e1:0d:63:7a:f3:
00:fa:7f:b1:76:da:f8:c6:9f:65:6c:f1:08:e4:af:
cf:7c:92:cc:14:57:28:a1:b2:77:a5:e6:93:10:8f:
d5:e3:09:54:06:43:e8:51:43:c5:cb:ac:7b:83:a5:
68:b7:04:5a:85:e1:11:68:1a:45:bb:4b:d6:93:2a:
19:b2:c4:3e:60:3a:e6:8a:38:b3:8a:0f:a8:71:6a:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:70:7F:82:05:A2:62:A7:61:A1:07:95:4A:92:B7:47:F2:04:0A
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:a1:c5:eb:a5:9c:42:8d:40:48:b2:d9:86:73:16:74:39:1d:
a4:5b:a7:e0:28:0f:09:80:75:c5:1b:e6:1b:3e:21:59:61:b5:
3f:5f:dc:f1:84:8d:2a:a4:95:d8:7c:c2:36:36:aa:b5:12:ce:
66:22:1a:c3:04:f7:a2:5e:2a:ff:ea:9d:b0:2a:bc:76:0f:73:
61:d9:c8:73:5a:ec:0c:06:74:9c:c2:97:12:e2:c3:9d:a3:43:
b0:2e:4e:97:4d:04:e9:ba:b3:71:09:88:e6:20:2c:d2:3a:eb:
21:99:92:6f:5a:80:b2:36:9a:41:d7:f6:ff:03:e7:a3:24:6b:
de:65:ea:47:41:a7:69:81:2e:9d:30:a3:bf:dc:50:8c:b2:18:
82:9f:35:23:e0:ff:ff:74:0f:ef:e0:4d:06:eb:38:4d:78:02:
c9:10:ef:08:3a:00:de:5e:6a:d9:e7:05:31:08:40:83:02:b8:
d5:26:d8:8c:21:19:52:01:66:30:df:80:ed:7f:09:e9:e9:b3:
79:3a:43:ef:75:26:c8:3f:07:2a:85:83:e8:45:6d:65:e2:25:
09:45:70:fe:42:5e:9e:35:fa:93:35:a6:ff:63:9e:00:17:31:
ff:47:91:20:91:c7:b6:49:9c:8d:c6:6a:e2:99:8d:ea:31:1a:
f6:5b:51:47
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWWsLYfhPDwfU61MX9IdGZHmceVMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUwMzA0MTgxMDQzWhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OTA4M2MwMDc3MTZjMjcyNWMwYjQyNDUxMWFjNzRhZjgw
MWE0MjBhODI5ZjFlYzJiNjNlNjk1ZmJlMjUxYWY4MS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbBXZj/p/9UAf0mTBZoxaqd6wIxzQWgXgKA24sCXzTbPIE
NBS6cz4X7oaVMjKRXhDZbHJqtT48pk+L9jADzUZlauFCWXqC6t8oIdIeKX4vcoSL
J+rW12C6A51NtWp2uauEu7Y4BUOv5lUye2uh9Bqf2sYzhuZ95FkIFBMFBEo1RcJI
gnm4xrLJBefRFIMHCuB5BG6lHHjxXrAUPdWR1DufPElJ4V1U0zY7QQOwBCDhDWN6
8wD6f7F22vjGn2Vs8Qjkr898kswUVyihsnel5pMQj9XjCVQGQ+hRQ8XLrHuDpWi3
BFqF4RFoGkW7S9aTKhmyxD5gOuaKOLOKD6hxaoRJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqJJwf4IFomKnYaEHlUqSt0fyBAowHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1LzA3NjUzMzU0LTYyZTAtNDkxMi05OGYwLTJjMjIzNTRlYzM4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVgfyAwDQYJKoZIhvcNAQELBQADggEBAHuhxeulnEKNQEiy2YZzFnQ5HaRb
p+AoDwmAdcUb5hs+IVlhtT9f3PGEjSqkldh8wjY2qrUSzmYiGsME96JeKv/qnbAq
vHYPc2HZyHNa7AwGdJzClxLiw52jQ7AuTpdNBOm6s3EJiOYgLNI66yGZkm9agLI2
mkHX9v8D56Mka95l6kdBp2mBLp0wo7/cUIyyGIKfNSPg//90D+/gTQbrOE14AskQ
7wg6AN5eatnnBTEIQIMCuNUm2IwhGVIBZjDfgO1/Cenps3k6Q+91Jsg/ByqFg+hF
bWXiJQlFcP5CXp41+pM1pv9jngAXMf9HkSCRx7ZJnI3GauKZjeoxGvZbUUc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:44 2025 by rpki-client